]> git.baikalelectronics.ru Git - kernel.git/commit
bridge: add new BR_NEIGH_SUPPRESS port flag to suppress arp and nd flood
authorRoopa Prabhu <roopa@cumulusnetworks.com>
Sat, 7 Oct 2017 05:12:37 +0000 (22:12 -0700)
committerDavid S. Miller <davem@davemloft.net>
Mon, 9 Oct 2017 04:12:04 +0000 (21:12 -0700)
commit4b33d9be4937f2f802a26ab54491746baa09654f
treed5d161286e665694818231b33c4cfe38264a1079
parent3334c7dfd1b45fe12e91afc27590317d1e7f3f6d
bridge: add new BR_NEIGH_SUPPRESS port flag to suppress arp and nd flood

This patch adds a new bridge port flag BR_NEIGH_SUPPRESS to
suppress arp and nd flood on bridge ports. It implements
rfc7432, section 10.
https://tools.ietf.org/html/rfc7432#section-10
for ethernet VPN deployments. It is similar to the existing
BR_PROXYARP* flags but has a few semantic differences to conform
to EVPN standard. Unlike the existing flags, this new flag suppresses
flood of all neigh discovery packets (arp and nd) to tunnel ports.
Supports both vlan filtering and non-vlan filtering bridges.

In case of EVPN, it is mainly used to avoid flooding
of arp and nd packets to tunnel ports like vxlan.

This patch adds netlink and sysfs support to set this bridge port
flag.

Signed-off-by: Roopa Prabhu <roopa@cumulusnetworks.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/linux/if_bridge.h
include/uapi/linux/if_link.h
net/bridge/Makefile
net/bridge/br_arp_nd_proxy.c [new file with mode: 0644]
net/bridge/br_forward.c
net/bridge/br_if.c
net/bridge/br_netlink.c
net/bridge/br_private.h
net/bridge/br_sysfs_if.c